lkml.org 
[lkml]   [2012]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC,PATCH 1/2] seccomp_filters: system call filtering using BPF
    On Thu, 12 Jan 2012, Alan Cox wrote:

    > In general I like this approach. It's simple, it's compact and it offers
    > interesting possibilities for solving some interesting problem spaces,
    > without the full weight of SELinux, SMACK etc which are still needed for
    > heavyweight security.

    Yes, I can see potential to vastly simplify MAC policy in some cases.


    - James
    --
    James Morris
    <jmorris@namei.org>


    \
     
     \ /
      Last update: 2012-01-13 02:37    [W:0.019 / U:88.828 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site